Login
- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 02-Device hardening configuration | 44.50 KB |
Hardening the device
Device hardening tasks at a glance
All device hardening tasks are optional. You can perform any of the tasks in any order.
· Disabling password recovery capability
Disabling password recovery capability
About this task
Password recovery capability controls console user access to the device configuration and SDRAM from BootWare menus. For more information about BootWare menus, see the release notes.
If password recovery capability is enabled, a console user can access the device configuration without authentication to configure a new password.
If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files.
To enhance system security, disable password recovery capability.
Restrictions and guidelines
Procedure
1. Enter system view.
system-view
2. Disable password recovery capability.
undo password-recovery enable
By default, password recovery capability is enabled.
Disabling USB interfaces
About this task
You can use USB interfaces to upload or download files. By default, all USB interfaces are enabled. You can disable USB interfaces as needed.
Prerequisites
Before using this command, use the umount command to unmount all USB partitions. For more information about this command, see Fundamentals Command Reference.
Procedure
1. Enter system view.
system-view
2. Disable USB interfaces.
usb disable
By default, all USB interfaces are enabled.
